# TEMPLATE file only

Listen 443

SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!NULL:RC4+RSA:+HIGH:+MEDIUM

#SSLPassPhraseDialog  file, XAMPP only. Give 'chmod 777 passphrase-file.conf' in Linux
SSLPassPhraseDialog  exec:<Path to passphrase dialog file>/passphrase-file.conf
#SSLPassPhraseDialog  builtin

<VirtualHost *:443>

#   General setup for the virtual host

ServerName www.example.com:443
ServerAdmin you@example.com
ErrorLog "<Path to log dir>/logs/error_log"
TransferLog "<Path to log dir>/logs/access_log"

SSLEngine on

# Proxy server's certificate file
SSLCertificateFile "<Path to keys>/certificate.cer"
# Proxy server's private key file
SSLCertificateKeyFile "<Path to keys>/private.key"
# Same as proxy server's certificate file for template or the chain file from CA
SSLCertificateChainFile "<Path to keys>/chain.pem"

SSLProxyEngine On

SSLProxyVerify none
SSLProxyCheckPeerName off
SSLProxyCheckPeerCN off
SSLProxyCheckPeerExpire off
SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLHonorCipherOrder On

# HSTS (optional)
Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
# Remove this if you need to use frames or iframes
Header always set X-Frame-Options DENY
# Prevent MIME based attacks
Header set X-Content-Type-Options "nosniff"

ProxyVia Off
ProxyPreserveHost On
AllowEncodedSlashes NoDecode

RequestHeader set X-Forwarded-Proto https
RequestHeader set X-Forwarded-Port 443
<Proxy *>
  Order deny,allow
  Allow from all
</Proxy>

# Reverse proxy configuration
ProxyRequests Off
<Location />
  ProxyPass https://localhost:2284/
  ProxyPassReverse https://localhost:2284/
</Location>

</VirtualHost>                                  
